Lucene search
+L

14 matches found

Tenable Nessus
Tenable Nessus
•added 2024/01/27 12:00 a.m.•38 views

FreeBSD : rclone -- Multiple vulnerabilities (b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the b5e22ec5-bc4b-11ee-b0b5-b42e991fc52e advisory. - A race condition in go-resty can result in HTTP request body disclosure across requests. Thi...

5.9CVSS7.3AI score0.93305EPSS
SaveExploits5References5
Veracode
Veracode
•added 2023/11/29 12:03 p.m.•25 views

Race Condition

github.com/go-resty/resty/ is vulnerable to Race condition. The vulnerability is due to calling sync.pool. The vulnerability arises due to improper handling of buffer reset functionality, wherein the buffer gets embedded with a request body and gets appended to current HTTP request body. Any...

5.9CVSS7.2AI score0.00722EPSS
SaveExploits1References6Affected Software1
RedhatCVE
RedhatCVE
•added 2023/11/29 10:29 a.m.•36 views

CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

4.7CVSS7.1AI score0.00722EPSS
SaveExploits1References3
OSV
OSV
•added 2023/11/28 5:36 p.m.•26 views

GHSA-XWH9-GC39-5298 github.com/go-resty/resty/v2 HTTP request body disclosure

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS5.2AI score0.00722EPSS
SaveExploits1References8
Github Security Blog
Github Security Blog
•added 2023/11/28 5:36 p.m.•23 views

github.com/go-resty/resty/v2 HTTP request body disclosure

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS7AI score0.00722EPSS
SaveExploits1References8Affected Software1
NVD
NVD
•added 2023/11/28 5:15 p.m.•22 views

CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS0.00722EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2023/11/28 5:15 p.m.•30 views

CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS6.1AI score0.00722EPSS
SaveExploits1References5
Prion
Prion
•added 2023/11/28 5:15 p.m.•32 views

Race condition

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

2.6CVSS6.8AI score0.00722EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2023/11/28 4:31 p.m.•67 views

CVE-2023-45286 HTTP request body disclosure in github.com/go-resty/resty/v2

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.8AI score0.00722EPSS
SaveExploits1References5
CVE
CVE
•added 2023/11/28 4:31 p.m.•1355 views

CVE-2023-45286

CVE-2023-45286 concerns a race condition in the Go HTTP client library go-resty/resty/v2. When request retries are enabled, calling sync.Pool.Put on the same bytes.Buffer more than once may yield a buffer that hasn’t been Reset, causing the HTTP request body from a prior request to be appended to...

5.9CVSS5.9AI score0.00722EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/28 4:31 p.m.•21 views

CVE-2023-45286 HTTP request body disclosure in github.com/go-resty/resty/v2

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

6.6AI score0.00722EPSS
SaveExploits1References5
OSV
OSV
•added 2023/11/28 4:31 p.m.•31 views

CVE-2023-45286 HTTP request body disclosure in github.com/go-resty/resty/v2

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

6.3AI score
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/28 12:00 a.m.•1 views

CVE-2023-45286: Concurrent Execution using Shared Resource with Improper Synchronization

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS6AI score0.00722EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/27 6:53 p.m.•26 views

GO-2023-2328 HTTP request body disclosure in github.com/go-resty/resty/v2

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

5.9CVSS5.2AI score0.00722EPSS
SaveExploits1References4
Rows per page
Query Builder